Who sees the names in our documents?
For labs, life science and universities
AI-ready documents. Without sending identities.
Anonimator is a local gateway between your staff and cloud AI such as ChatGPT, Claude or Copilot. It pseudonymises personal data before anything leaves your premises, then restores the real data in the answer.
Pre-release. Demo on request. There is no public download.
The challenge
Researchers, lab teams and administrative staff want cloud AI to summarise reports and draft documents. But those documents contain personal data: names, dates, contact details, ID numbers, health information. Sending them as they are to an external provider raises hard questions.
What about health data and data about minors?
Cloud AI without uploading identities?
How it works
1
Staff work as usual
Requests to ChatGPT, Claude or Copilot go through Anonimator, an OpenAI-compatible proxy on your premises.
2
Identities become placeholders
Names, emails, phones, IBAN, ID numbers, dates. If it can't check, nothing is sent.
3
Real data restored
The cloud AI answers with placeholders; Anonimator puts the real data back for your user.
Key benefits
1
Personal data detection
Names, emails, phones, IBAN, AHV/AVS, DNI/NIE, dates, licence plates.
2
Fail-closed by default
If Anonimator can't check a request, nothing is sent.
3
Re-identification under your control
Keys and mappings are managed in your infrastructure.
4
Purpose-aware policies
Strict handling of health data and data about minors.
5
Audit without personal data
Oversight without creating new records of identities.
6
Your formats, five languages
Word, Excel, PowerPoint, PDF, text; OCR optional. ES, DE, FR, IT, EN.
How it differs
| DIY toolkits | Cloud DLP | Anonimator | |
|---|---|---|---|
| Where your data is processed | Locally, as a library | In the provider's cloud | On your premises |
| Fail-closed gateway | No. You assemble it | No built-in AI proxy | Yes. Nothing leaves unchecked |
| Real data restored in the answer | Only if you build it | Varies by service | Automatic |
| Re-identification key | Up to you | Data goes to the provider | Keys protected in your infrastructure |
Other on-premise tools also keep data local. Anonimator is one ready-to-run, fail-closed gateway with automatic re-identification.
Typical use cases
Lab and research
Study documents, analytical results, clinical texts.
Documentation and correspondence
Applications, records and emails with personal data.
Internal knowledge
SOPs, technical documentation, project reports.
Built around your control
Personal data is pseudonymised before anything leaves. Keys are managed in your infrastructure. If it can't check, nothing is sent. It helps with your data-protection obligations and does not replace them.
Pre-release
Closed-source, on-premise product by Castellon.CH. Standard CPUs, no GPU needed. The Anonimator MCP server is coming later.
Contact
Write to us to request a demo for your lab, life-science company or university.
Antonio Castellon · Castellon.CH
Biel/Bienne, Switzerland
Anonimator performs pseudonymisation, not anonymisation: the data remains personal data for your organisation (CJEU, C-413/23 P). ChatGPT, Claude, Copilot and Presidio are trademarks of their respective owners.